Privacy Policy

JomWin33 ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at jomwin33.cam (the "Platform"). As part of providing our services to registered users ("you", "Player", "User"), we necessarily collect, process, store, and use certain personal information about you.

This Privacy Policy ("Policy") describes in plain, accessible language: (a) the categories of personal data we collect; (b) the lawful bases and purposes for which we process that data; (c) how we store and protect your information; (d) when and with whom we share it; and (e) the rights you hold in respect of your personal data and how to exercise them.

This Policy applies to all personal data collected through the Platform, our live chat and email support channels, KYC verification processes, and any other interaction you have with JomWin33. It should be read alongside our Terms & Conditions, which govern your use of the Platform generally.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, location data, or any factor specific to the identity of that person.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For all data collected through the Platform, the Data Controller is JomWin33.
• "Data Processor" — a third party that processes Personal Data on behalf of the Data Controller in accordance with written instructions.
• "KYC" — Know Your Customer verification — the identity and address verification process applied to registered accounts.
• "Cookie" — a small text file placed on your device by the Platform to enable certain functionality, analytics, and personalisation features.
• "MYR / RM" — Malaysian Ringgit, the base currency of the Platform for all Malaysian player accounts.

JomWin33 collects the following categories of personal data:

We do not collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, biometric data, or health information) unless required by regulatory obligation, in which case you will be notified separately and your explicit consent obtained.

JomWin33 collects personal data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, configure account preferences, or participate in promotions.
• Automatically — when you access or use the Platform, our servers automatically record technical data including IP addresses, device identifiers, and session logs via server logs, cookies, and similar tracking technologies.
• From third-party service providers — including payment processors (such as FPX, DuitNow, Touch 'n Go eWallet, Boost, and banking partners), KYC verification services, and fraud detection partners, who may provide us with information necessary to complete transactions or verify your identity.
• From publicly available sources — where required for fraud prevention or regulatory compliance, we may supplement your information with data from public records or commercially available databases.

JomWin33 processes your personal data only where a valid legal basis exists. The following table sets out the primary processing activities and their corresponding legal bases:

Where processing is based on "legitimate interests", JomWin33 has conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request further information on any such assessment by contacting us as described in Section 15.

JomWin33 uses the personal data we collect for the following specific purposes:

• To create, verify, and administer your JomWin33 Account, including processing your MYR wallet balance and transaction history.
• To process deposits made via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency (BTC/USDT), and to process withdrawal requests to your registered payment method.
• To verify your identity and age (21+) as required by our Terms & Conditions and applicable regulations, and to conduct ongoing AML monitoring of account activity.
• To deliver, maintain, and improve the Platform — including personalising your gaming experience, ensuring platform stability, and resolving technical issues.
• To administer promotional offers, loyalty tier benefits, and bonuses, and to enforce associated wagering requirements and eligibility conditions.
• To monitor gaming activity for signs of problem gambling and to apply or offer responsible gambling tools where appropriate, in fulfilment of our duty of care.
• To detect, investigate, and prevent fraud, collusion, cheating, and other forms of prohibited conduct on the Platform.
• To send you service-related communications, including Account notifications, transaction confirmations, security alerts, and updates to our Terms or this Privacy Policy.
• To send you promotional communications about JomWin33 offers and new features, where you have consented or where we have a legitimate interest to do so — subject always to your right to opt out.
• To comply with our legal, regulatory, and contractual obligations, including responding to lawful requests from competent authorities.

JomWin33 does not use your personal data for automated individual decision-making — including profiling — that produces legal effects or significantly affects you, except for fraud scoring and AML transaction monitoring, where we have taken appropriate safeguards including human review of significant findings.

JomWin33 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

• Payment processors and e-wallet providers — to facilitate deposits and withdrawals (e.g., FPX gateway operators, DuitNow, Touch 'n Go, Boost, GrabPay). Each provider operates under their own privacy policy and data security standards.
• KYC and identity verification providers — to verify your identity, age, and address as required before processing withdrawals or upon regulatory request.
• Fraud prevention and AML service providers — to screen transactions and account activity against risk databases and to comply with anti-money laundering obligations.
• Game content providers — to the extent that game session data is processed by the relevant game studio in order to determine game outcomes and record results. Studios supplying content to JomWin33 are required to process data only for this specific purpose.
• IT infrastructure and cloud service providers — for Platform hosting, data storage, and operational systems, under binding data processing agreements that restrict use to JomWin33's instructions.
• Legal and regulatory authorities — where we are required to disclose your data by applicable law, court order, regulatory authority, or law enforcement request. JomWin33 will notify you of such disclosure where legally permitted to do so.
• Professional advisers — including lawyers, auditors, and insurers, under obligations of confidentiality, where necessary for the provision of professional services.

JomWin33 uses cookies and similar tracking technologies (including session tokens and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the Platform — for example, maintaining your login session and remembering your Account preferences. These cannot be disabled without impairing Platform functionality.
• Performance / Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform (pages visited, session duration, error rates). This data is used to improve the Platform experience. No individual player is identified in analytics reports.
• Functional Cookies: Used to remember preferences such as language settings, responsible gambling limit configurations, and notification preferences.
• Security Cookies: Used to support fraud detection and to authenticate users, protecting your Account from unauthorised access.

You may control cookie settings through your browser's settings menu. Please note that disabling certain categories of cookies may affect Platform functionality. JomWin33 does not use third-party advertising cookies or behavioural advertising tracking technologies.

JomWin33 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

• Account and transaction records: Retained for a minimum of five years from Account closure or the date of the last transaction, as required under standard anti-money laundering regulations applicable to gaming operators.
• KYC and identity documents: Retained for a minimum of five years from Account closure, or longer if required by a specific regulatory instruction or legal proceeding.
• Customer support records: Retained for three years from the date of the last interaction, to support complaint handling and audit purposes.
• Technical and log data: Retained for up to 12 months, after which it is aggregated or deleted.
• Marketing consent records: Retained for as long as you hold an Account, and for two years following opt-out, to demonstrate compliance with consent requirements.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

JomWin33 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and JomWin33's servers.
• Encryption of sensitive data fields (including payment references and KYC document data) at rest in our databases.
• Access controls limiting internal access to personal data on a strict need-to-know basis, with multi-factor authentication required for privileged access.
• Regular security assessments and penetration testing conducted by qualified independent security professionals.
• Incident response procedures designed to detect, contain, and notify affected parties of data breaches within the timeframes required by applicable regulations.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, JomWin33 will notify you without undue delay, as required by applicable data protection regulations, and will take all reasonable steps to mitigate the impact of the breach.

As a data subject, you hold the following rights in respect of personal data that JomWin33 holds about you. These rights are subject to applicable legal limitations and may be exercised by contacting us as described in Section 15.

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Subject Request". JomWin33 will acknowledge your request within five business days and provide a substantive response within 30 calendar days, or notify you if a longer period is required.

We may need to verify your identity before processing a data subject request. This is to ensure we do not disclose or modify data belonging to another individual. Verification will typically require you to confirm details from your Account registration or KYC records.

JomWin33 strictly prohibits access to the Platform by individuals under the age of 21. The Platform is not directed at, and does not knowingly collect personal data from, anyone under the age of 21.

If JomWin33 becomes aware that personal data has been collected from a person under the age of 21, we will immediately take steps to close the relevant Account, delete all associated personal data (save where retention is required by law), and return any deposited funds to the original payment method. We will not retain winnings generated by an underage Account.

As an online gaming platform with global infrastructure, JomWin33 may transfer your personal data to countries outside of Malaysia for the purposes of cloud hosting, KYC processing, and game content delivery. Where personal data is transferred internationally, JomWin33 ensures that appropriate safeguards are in place, which may include:

• Binding contractual clauses that impose equivalent data protection obligations on the recipient.
• Transfers to jurisdictions recognised as providing an adequate level of data protection.
• Other lawful transfer mechanisms as recognised under applicable data protection frameworks.

You may request information on the specific safeguards in place for any international transfer of your personal data by contacting us at the details provided in Section 15.

JomWin33 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our processing activities, or improvements to our practices. Where amendments are material, we will provide prior notice by displaying a prominent notice on the Platform or by sending a notification to your registered email address.

The "Last Updated" date at the top of this page will be revised whenever changes are made. We recommend that you review this Policy periodically. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms, to the extent permitted by applicable law. Where your consent is the legal basis for a processing activity affected by a material amendment, we will seek renewed consent before proceeding with the updated processing.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by JomWin33, please contact our Data Protection team using the details below:

If you are not satisfied with our response to your privacy concern or data subject request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. JomWin33 will cooperate fully with any such supervisory process.

This Privacy Policy was last reviewed and updated on 1 January 2026 (Version 2.4). All previous versions of this Policy are superseded by this document.